https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T22:11:42.243292+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2024-5824 CVE-2024-5824 — Path Traversal in parisneo/lollms 2026-10-02T22:11:42.280361+00:00

Affected: parisneo/lollms, parisneo lollms-webui

A path traversal vulnerability in the `/set_personality_config` endpoint of parisneo/lollms version 9.4.0 allows an attacker to overwrite the `configs/config.yaml` file. This can lead to remote code execution by changing server configuration properties such as `force_accept_remote_access` and `turn_on_code_validation`.

 https://cve.radiocsirt.org/vuln/ghsa-m45c-v46h-c788 GHSA-m45c-v46h-c788 — lollms path traversal vulnerability allows overriding of config.yaml file, leading to RCE 2026-10-02T22:11:42.280420+00:00

Affected: PyPI: lollms

A path traversal vulnerability in the `/set_personality_config` endpoint of parisneo/lollms version 9.4.0 allows an attacker to overwrite the `configs/config.yaml` file. This can lead to remote code execution by changing server configuration properties such as `force_accept_remote_access` and `turn_on_code_validation`.